[TYPO3-dev] access control

[Rico Moorman]

Hi tapio,

So you had to rewrite the part which renders the page modulecontent for 
tt_content in order to make your changes visible...you made a 
comprehensive extension from the idea of restricing access with admins 
there.. :-)


> Rico Moorman wrote:
> 
>> Welcome back : )
>>
>> I think in order to first make an attempt to implement it could be 
>> wise to do it on usergroup level ...
> 
> 
> in overall reasonable - it could have correspondling list like selecting 
> for which FE-groups can see the content.
> 
>> One thing I noticed in 3.8.1 was that for example the functions 
> 
> 
> concerning rendering content elements, there is already a condition, 
> which checks, if the content element type can be edited or not.
> That base on content element types. I added for this an extra condition 
> to check if the user is an admin user or not. Inside a loop this could 
> be checked for groups - and no extra variable is not needed.
> 
> Needs some new features to the  XCLASS-implementations for 'alt_doc.php' 
> and 'db_layout.php' ('Quick edit' mode use this for content editing), 
> which I have done.
> 
> The disadvantage of using this system is that it doesn't take element 
> from lists - users see the access restriction when they try to edit the 
> resticted content.
> 
> edit icons relate frontend editing and they are totally another issue
> 
>> further for the list view (>> typo3/class.db_list_extra.inc:790) there 
>> is a statement getting the permissions for this particular element
> 
> 
> not absolute necessary because list module uses  'alt_doc.php' for 
> content editing.